Skip to content
OpenAdvisories
Medium RHBA-2020:4195 1 CVE

Red Hat Bug Fix Advisory: Ansible 2.8.16 release for Ansible Engine 2.8

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2.8::el7 ansible 0:2.8.16-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2.8::el8 ansible 0:2.8.16-1.el8ae

Vulnerabilities 1

  • Medium 5.0
    CVE-2020-1753

    Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible

    A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as pass…

    Red Hat Ansible ansible ansible Debian Ubuntu PyPI

References

  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_4195.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-1753
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1811008
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1753
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1753